CVE-2022-41414

CVE-2022-41414 describes an insecure default in the Liferay Portal component auth.login.prompt.enabled , affecting portal versions 7.0.0–7.4.2 . The root cause is an insecure default setting that allows attackers to enumerate usernames, site names, and pages . The documented remediation in a thir...